Ukraine and Russia Report Fake Emergency Alerts as Cyberattacks Target Warning Apps
Ukraine and Russia reported false emergency notifications after attacks on public warning apps, highlighting the risks of digital disruption during conflict.

Ukraine and Russia have reported cyber incidents affecting public emergency-warning apps, with users receiving false alerts. The disruption highlights how digital warning systems can become targets during armed conflict.
KYIV — Ukraine’s air force said a public air-raid alert app had been compromised after users received false emergency notifications, including warnings referring to nuclear and chemical threats, according to Reuters and Associated Press reporting.
Russian authorities also reported false notifications affecting warning apps. The publicly available reports do not establish that the same attackers were responsible for incidents on both sides.
Ukraine False Emergency Alerts: What We Know
Understanding inaccurate warnings, public safety risks and the safeguards needed to protect trust in emergency systems.
Editorial snapshot · Not a live emergency service
How to respond to a suspicious emergency alert
These are general safety principles. Always follow current instructions from the relevant local emergency authorities.
Read the warning carefully
Identify the location, type of danger and any immediate protective instructions.
Check official channels
Where possible, corroborate the alert through an official emergency website, broadcaster or other authorised channel.
Follow current safety guidance
Do not ignore an active emergency instruction simply because another notification was inaccurate.
Avoid spreading unverified claims
Check authenticity and context before sharing screenshots or identifying alleged attackers.
Interactive public-safety risk explorer
False high-severity warning
An inaccurate warning could prompt unnecessary movement, fear or congestion.
Potential consequence, not a verified impact count from this incident.
What emergency-system operators should examine
Access and authorisation controls
Restrict who can create, approve and transmit high-severity alerts, with appropriate authentication and separation of duties.
These are recommended controls, not confirmed deficiencies in the affected system.
Editorial evidence checklist
Use this checklist before publishing new claims about the incident.
0 of 5 checks marked
This checklist is an editorial aid. Marking an item does not independently verify a claim or update the published article.
Digital trust is part of public safety
Emergency-warning infrastructure must deliver credible information quickly, while providing mechanisms to detect, correct and explain inaccurate messages.
The reported incident illustrates the importance of access controls, operational resilience and transparent incident communication. It does not, on the available evidence, establish malware, state sponsorship or a data breach.









